Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/ec11c3d2-17e5-39a3-a234-23d15e9db737.roa
File:                     ec11c3d2-17e5-39a3-a234-23d15e9db737.roa (raw, json)
Hash identifier:          l1LtxZO7UKPRnY0GCTzBnQ+JDE0ib3mBeZR1zCKHQas=
Subject key identifier:   7B:28:D0:A5:D8:3D:A6:C4:7A:E3:D5:CB:9A:30:52:6D:44:A8:4C:0E
Certificate issuer:       /CN=d23bf149-3e89-4ca4-b96d-918c2eab87d8
Certificate serial:       010D0C9F4328584F31B7BF821FDCEDA8F1D50480
Authority key identifier: 59:DA:25:1D:FF:DB:09:20:84:C1:22:8B:2F:20:BE:28:0D:90:A2:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/ec11c3d2-17e5-39a3-a234-23d15e9db737.roa
Signing time:             Wed 16 Sep 2026 13:00:12 +0000
ROA not before:           Wed 16 Sep 2026 13:00:12 +0000
ROA not after:            Tue 15 Dec 2026 14:00:12 +0000
asID:                     22223
IP address blocks:        184.94.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:31:b7:bf:82:1f:dc:ed:a8:f1:d5:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d23bf149-3e89-4ca4-b96d-918c2eab87d8
        Validity
            Not Before: Sep 16 13:00:12 2026 GMT
            Not After : Dec 15 14:00:12 2026 GMT
        Subject: CN=1e9b5a3e-de0a-4dca-b93e-e942559d614c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:43:54:73:eb:98:16:f5:ad:23:f5:86:5b:5a:
                    30:17:20:e1:58:7e:b9:00:74:3d:e1:ff:78:3f:f3:
                    3e:2e:8d:c7:82:f7:9c:76:af:00:3d:91:27:ff:76:
                    27:80:77:a0:da:c4:af:d3:8f:1c:e0:1f:0f:47:46:
                    36:b9:b7:d8:ec:2c:c9:a4:7f:bc:92:21:fa:b7:1c:
                    f1:7f:f3:7b:94:b3:1d:05:d5:22:c0:8a:ec:10:bc:
                    dc:d7:5f:44:74:46:61:e0:92:bc:c3:db:c3:1c:1f:
                    22:51:f1:85:a9:d7:a9:79:46:9b:ba:9f:35:2b:c1:
                    89:18:33:e2:f9:90:f0:4f:c5:45:67:ab:8d:0a:cb:
                    c3:c4:67:f2:bd:9b:83:db:f7:1d:1e:17:7f:45:40:
                    94:95:17:80:c8:39:fa:20:26:b5:0f:1b:fa:07:78:
                    c5:87:d3:87:6c:da:02:69:3d:6a:9c:d6:4f:1e:85:
                    86:d3:4d:79:75:db:95:f1:bc:47:1c:1f:01:63:1e:
                    0d:88:6d:f1:4e:32:4e:a3:bf:0a:4d:65:a9:44:2d:
                    ed:1e:46:e9:4c:c3:42:61:82:1b:24:3f:55:2e:7c:
                    7d:cc:e3:c7:4f:04:0a:10:77:f5:8c:31:aa:b9:fc:
                    8a:a3:70:7c:e6:9a:7c:1d:16:c8:51:92:2f:35:61:
                    06:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:28:D0:A5:D8:3D:A6:C4:7A:E3:D5:CB:9A:30:52:6D:44:A8:4C:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/ec11c3d2-17e5-39a3-a234-23d15e9db737.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.crl

            X509v3 Authority Key Identifier:
                keyid:59:DA:25:1D:FF:DB:09:20:84:C1:22:8B:2F:20:BE:28:0D:90:A2:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.94.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:7f:dc:95:03:45:20:d2:65:55:2c:a8:d7:76:22:47:7d:44:
         53:3d:06:76:82:8f:ab:1f:a4:9d:14:1f:41:c7:d7:b3:8f:db:
         5f:0b:55:b7:17:51:74:13:3a:34:a9:29:13:e0:0f:e0:ab:d9:
         7b:0f:91:0b:0f:ac:f1:43:e7:0f:f7:dc:e7:86:73:89:47:b2:
         2d:a9:3e:84:7d:e1:5f:96:a0:fd:f1:e5:79:63:c3:fa:40:89:
         67:2a:fc:f5:d9:77:d8:be:cb:8f:6e:a9:95:e7:07:d3:aa:84:
         b2:47:a0:7b:8d:0e:f9:d8:a5:9a:06:e1:7e:2a:68:2a:c7:9a:
         64:50:b1:9c:73:41:d0:bf:0d:53:39:46:42:f8:79:21:a5:f9:
         26:85:da:f8:96:fe:36:0e:74:2a:12:00:f9:d4:ac:29:3e:a0:
         09:f5:ec:22:06:f8:5c:98:75:88:fa:a3:ce:20:1a:60:78:ff:
         d9:37:a6:6f:b3:a7:4e:89:87:6c:a4:db:c2:ab:90:79:f3:9a:
         47:ca:d7:ab:f1:31:dd:1f:58:6a:c7:27:ba:cb:be:ea:f7:e8:
         af:e6:d4:2e:70:3c:ee:e6:7f:58:29:a0:f8:8b:37:ac:14:af:
         71:97:c0:8f:2a:7e:21:86:2d:c6:b0:94:e6:94:86:e4:58:d0:
         94:dd:3b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:50:39 2026 by rpki-client